浅谈组织信息安全风险管理的重要性及实施步骤  

On the Significance and the Implementation Step of the Risk Management of Information Security of Institutions

作　　者：石秀芳[1] 刘景浩 

机构地区：[1]山东省电子产品监督检验所,山东济南250014 [2]国家信息通讯国际创新园,山东济南250001

出　　处：《电子质量》2011年第8期51-52,共2页Electronics Quality

摘　　要：随着信息技术的高速发展,特别是internet的问世及网上交易的启用,许多信息安全的问题也纷纷出现。系统瘫痪、黑客入侵、病毒感染、网络钓鱼、网页改写、客户资料的流失及公司内部资料的泄露,等等。这些给组织的经营管理、业务发展甚至生存都带来严重的影响。在促进业务发展的同时如何保证自身的信息安全成了摆在企业面前的重要课题。该文通过对组织现有面临的信息安全问题的分析,提出了通过建设信息安全管理体系解决信息安全问题,着重阐述了在推行信息安全管理体系时如何进行信息安全风险管理活动。Along with the rapid development of modern information technology,especially the advent of internet and the applications of networked transaction,a great number of information problems have arisen such as system down,hacker attack,virus infection,anti-phishing,web rewriting,loss of the client information and disclosing of the internal company files,etc.At the same time,these problems have brought some serious influence on the management and development even the existence of the organizations.So how to prove the information security while promoting the development of corporation is becoming an important task.Based on the analysis of the information security problems that the institutions are facing,this paper propose a solution by building the information security management system which focus on how to proceed the risk management of information security in the process of pursuing the system.

关 键 词：风险管理 

分 类 号：F49[经济管理—产业经济] F272